Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/ta1sP7lNK1Zb29lOqWuGP3lXRcw.roa
File: ta1sP7lNK1Zb29lOqWuGP3lXRcw.roa (raw, json)
Hash identifier: pPTSvKtqRlM0dVoIP0Eywa5PO7d0KUm4bNLLkG+1YQ4=
Subject key identifier: B5:AD:6C:3F:B9:4D:2B:56:5B:DB:D9:4E:A9:6B:86:3F:79:57:45:CC
Certificate issuer: /CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Certificate serial: 018F620E51F98A9B6EA04DB91F82E9401218
Authority key identifier: D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/ta1sP7lNK1Zb29lOqWuGP3lXRcw.roa
Signing time: Fri 10 May 2024 10:30:56 +0000
ROA not before: Fri 10 May 2024 10:30:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 10 May 2024 11:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:62:0e:51:f9:8a:9b:6e:a0:4d:b9:1f:82:e9:40:12:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8eeb20a880cdb494e9e62d43b2ef28c90cb9eef
Validity
Not Before: May 10 10:30:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5ad6c3fb94d2b565bdbd94ea96b863f795745cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:15:18:6d:01:7f:a4:1a:0d:10:a8:96:8f:05:
1e:46:77:86:ff:5a:b9:32:c5:29:d1:05:a7:39:2d:
98:08:d8:05:e2:d6:3b:f6:85:7b:b8:cf:cd:03:0d:
8b:86:be:38:8a:41:ad:c6:3d:f5:be:1d:2c:51:6a:
33:62:53:fb:25:e9:4b:43:fe:a9:07:a9:cf:6e:8d:
7f:83:b8:b9:eb:b2:74:23:bb:72:d1:b0:2b:81:2a:
9c:1a:55:a6:6a:ca:4f:d8:27:5b:c4:9b:d1:7f:05:
43:00:6d:a3:0e:ec:aa:34:ef:13:48:6a:4e:fa:b1:
9b:7d:59:d6:cf:5c:54:af:cf:7b:92:f7:07:ad:f5:
11:88:4b:31:5c:a7:8c:18:65:5f:8d:79:1d:23:35:
24:05:5f:1b:3d:8b:a0:64:27:07:52:ac:86:5b:70:
43:4c:7b:3d:ac:3d:92:16:cd:0b:d7:a9:ac:33:42:
46:76:30:5d:fc:43:e6:45:b4:a3:40:94:04:7e:23:
ca:bb:28:bf:e1:7a:d5:ab:0b:5e:eb:a9:31:c0:7e:
9c:5a:ef:d7:30:24:e7:aa:5d:b0:f1:2a:14:06:53:
4f:ac:69:5e:c0:d4:52:a7:53:7c:72:f6:ba:fc:7f:
df:87:ea:02:9a:62:17:02:12:82:3e:49:88:cc:34:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AD:6C:3F:B9:4D:2B:56:5B:DB:D9:4E:A9:6B:86:3F:79:57:45:CC
X509v3 Authority Key Identifier:
keyid:D8:EE:B2:0A:88:0C:DB:49:4E:9E:62:D4:3B:2E:F2:8C:90:CB:9E:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O6yCogM20lOnmLUOy7yjJDLnu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/ta1sP7lNK1Zb29lOqWuGP3lXRcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/fe3dbe-9708-4242-9277-96b50bcc7a08/1/2O6yCogM20lOnmLUOy7yjJDLnu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/48
Signature Algorithm: sha256WithRSAEncryption
3d:e6:28:1c:45:71:56:de:75:ad:98:3e:7d:01:3e:55:05:c2:
8d:a4:db:50:ea:42:4c:e8:66:d9:7d:3f:57:30:80:df:f1:18:
3f:a5:f5:f3:2e:00:63:9e:27:77:0f:c8:23:ac:0a:fe:5a:f0:
39:7a:17:1d:a7:ff:da:98:87:5c:24:08:cd:de:f9:ef:17:b9:
7f:17:9c:d7:31:02:24:4f:38:af:aa:c9:f2:49:93:f4:a5:0d:
69:ca:ed:3a:a9:c3:d8:d2:a3:5d:d4:7b:b0:e4:2e:d2:14:d1:
69:7b:92:8c:21:56:74:95:57:59:16:45:a1:82:de:c4:4d:f4:
da:ed:09:1a:26:41:a9:5e:d4:23:ac:c0:4e:10:a9:3b:0b:c2:
cf:7f:79:01:b4:da:4d:2f:00:f0:c5:58:88:7d:b2:33:9f:01:
fb:6e:55:95:e2:0c:05:9f:4c:b8:40:fc:22:1e:9d:22:9f:7b:
57:02:26:0f:06:c7:da:95:5f:4a:24:fc:ff:02:55:75:37:ff:
35:7f:8d:aa:d0:b8:0e:90:47:ea:69:01:0b:91:7a:b1:d5:68:
4f:2f:0b:c7:d6:d0:75:65:0b:5b:3e:13:2c:ee:a6:db:37:ac:
0e:a8:da:65:21:4d:4a:fb:34:9d:89:6d:58:1d:5b:85:82:9e:
a9:31:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:00 2024 by rpki-client on console-fra.rpki-client.org